The Heat Stack Owner role allows users access to the Heat Cloud Orchestration Service. Users who
attempt to use Heat when they do not have this role will receive an error stating they are missing
the required role. This role is required for interacting with the Cloud Orchestration Service,
regardless of other roles.

For more information on this service, please consult the documentation at Cloud orchestration.

The Compute Start/Stop role allows users to start, stop, hard reboot and soft reboot compute
instances. Other, more destructive or creative actions will fail. This role is implied when a user
also has Project Member.

The Object Storage role allows users to create, update and delete containers, and objects within
those containers. Creative and destructive actions related to compute, network and block storage
will fail. This role is implied when a user also has Project Member.

Selecting the “Update User” action from the main “Project Users” screen will load the same panel as
the one presented when inviting a new user. It is then possible to modify the current roles
assigned to the user.